Skip to main content
affpapa.org
RU EN
skill CX Codex

skill-file-security — Claude Code skill: what it does, install

Adds OWASP and CWE security rule sets to your project so your AI assistant can audit code and prepare patch diffs right inside your editor.

Install into Claude Code · Skills CLI (Vercel) All methods and platforms ↓ 
npx skills add reason-machines/security-skills --skill skill-file-security -a claude-code
Open on GitHub

What skill-file-security does

This skill installs 29 rule files directly into the .skills/security/ folder. The AI assistant uses these instructions to catch vulnerabilities defined by OWASP Top 10 and CWE Top 25 standards. It spots hardcoded credentials, misconfigured HTTP headers, injection risks, and database flaws tailored to your stack.

Daily workflows rely on six slash commands. Running /security-scan quickly flags critical issues. Using /security-audit evaluates your codebase and calculates an overall score. The tool tracks audit history over time inside memory-security.md.

Applying updates through /security-fix requires explicit approval after previewing the diff. Setting up this skill changes your repository tree by writing configuration files and updating .gitignore.

What it helps with

  • locate leaked secrets and exposed environment variables
  • verify row-level security policies across database migrations
  • calculate codebase security score against OWASP standards
  • produce reviewed patch diffs for discovered vulnerabilities

Example prompts for the agent

  • /security-scan
  • /security-audit
  • /security-fix rls

How to install skill-file-security

1Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill skill-file-security -a claude-code

2Manually: put the files in place

~/.claude/skills/skill-file-security/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/skill-file-security/

Step by step, with commands for each platform: How to install skills in Claude Code: five ways

Questions about skill-file-security

How to install skill-file-security in Claude Code?

Run npx skills add reason-machines/security-skills --skill skill-file-security -a claude-code in your terminal.

What does skill-file-security do?

It copies 29 security rule documents into your repository and configures slash commands for vulnerability reviews.

Does the skill modify code automatically?

No. Whenever you run /security-fix, it renders a diff first and waits for your confirmation before changing files.

Similar skills

All skills for Security →
git-guardrails-claude-code Matt Pocock This skill adds a Claude Code hook that stops risky Git commands before they run. Use it when an agent must not push or discard working-tree changes. 499,069installs ponytail-review DietrichGebert ponytail-review reviews a change beyond the diff, checking connected code, bugs, risks, load, tests, speed, and unnecessary code. Use it for PRs and commits. CX Codex +1 57,000installs ponytail-audit DietrichGebert It audits a repository and ranks bugs, risks, and redundant code in a one-shot report. Use it when you need a review without code changes. CX Codex +1 45,400installs security-audit cloudflare Reviews codebases and APIs for vulnerabilities using safe sandboxing. Fits pre-release security reviews, pen-test triage, and architecture checks. CX Codex +1 54,800installs security-and-hardening addyosmani Guides threat modeling and security checks for code that handles user input, authentication, sessions, or external services. Use it when building a feature that accepts untrusted data or reviewing code before release. CX Codex +1 70,200installs supabase official supabase Guides the agent through database configuration and strict RLS policies in Supabase. CX Codex GP ChatGPT 8installs

From the same set69

malware-distribution-awareness Flags malicious repositories pretending to offer cracked security software and provides incident response commands for compromised Windows environments. CX Codex +1 815installs edgesecurityaccess-wireguard-vpn This skill walks the agent through standing up a WireGuard VPN: build the Go server, add users, and hand out configs over an HTTP API. CX Codex +1 788installs bitdefender-malware-analysis Teaches coding agents to spot fraudulent repositories peddling malicious installers and safely inspect suspicious payloads in network-free environments. CX Codex +1 784installs zen-ai-pentest-framework A skill that sets up an autonomous pentest framework for AI agents, running real security tools and producing compliance-mapped reports. CX Codex +1 779installs bitdefender-malware-investigation Guides security analysis of a deceptive repository masquerading as an antivirus crack. Ideal for researchers investigating trojan distribution vectors. CX Codex +1 775installs sparkfinderoven-security-compliance-skills A suite of commands and workflows for security and compliance work: OWASP scanning, CVE detection, GDPR audits, SOC 2 readiness, threat modeling. CX Codex +1 759installs security-compliance-skills-suite-claude This skill scans code and dependencies for security issues, supports GDPR, SOC 2 and ISO 27001 checks, and guides incident response. CX Codex +1 754installs pentestify-security-report-generator A skill that turns pentest findings into a structured report: vulnerability tracking, live risk stats and PDF export. CX Codex +1 747installs

Project sponsors

Companies that keep this analytics open
Gold sponsor
Nutra.Club

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor